October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 (KB 4043767)

October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 KB 4043767 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2...

CVE-2017-11813

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...

PT-2017-11411 · Juniper Networks · Contrail

The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and ha...

DEBIAN-CVE-2012-6696

inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836...

CVE-2017-8740

creationtimestamp| type| source ---|---|--- 2017-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42764...

CVE-2017-9649

A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants including RSD31-AM Package, DRM-1/2 and variants including Solar PWR Package, DRM and RDS Based Boundary Monitors, External...

CVE-2017-8710

The Microsoft Common Console Document .msc in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbitrary files via an XML external entity XXE declaration, due to the way that the Microsoft Common Console Document .msc parses XML input containing a reference t...

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-32622)

Microsoft Office 2007 SP3, etc. are office software suite products developed by the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Office, which arises from the program failing to properly handle objects in memory. A remote attacker could exploit this...

CVE-2017-14075

creationtimestamp| type| source ---|---|--- 2017-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42625...

SUSE-SU-2017:2356-1 Security update for postgresql96

This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...

JasPer Denial of Service Vulnerability (CNVD-2017-25685)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer, which can be exploited by a remote...

CVE-2017-6995

creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...

CVE-2017-6999

creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...

NewSouth Innovations Kakadu SDK Buffer Overflow Vulnerability (CNVD-2017-28778)

NewSouth Innovations Kakadu SDK is a JPEG2000 software development kit from NewSouth Innovations, Australia. A buffer overflow vulnerability exists in version 7.9 of the NewSouth Innovations Kakadu SDK, which originates when the program fails to properly perform bounds detection on user-submitted...

CVE-2017-11228

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 JP2 code stream data. Successful exploitation could lead to...

UBUNTU-CVE-2015-5221

Use-after-free vulnerability in the mifprocesscmpt function in libjasper/mif/mifcod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2017-7041

creationtimestamp| type| source ---|---|--- 2017-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42366...

CVE-2017-6729

A vulnerability in the Border Gateway Protocol BGP processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core VPC Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reloa...

Cisco StarOS CLI Local Command Injection Vulnerability

The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to long-term evolution. and StarOS is the suite of Linux operating systems used in them. A security vulnerability in Cisco StarOS and Cisco Virtualized Packet Core VPC Software for handling C...

Cisco ASR 5500 Series Routers Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability exists in the Cisco ASR 5000 series routers. A remote attacker can cause a denial of service by sending specific TCP packets to the StarOS...